Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C850F2F2508B11F1A1F1171DCF1D38B0.roa
File: C850F2F2508B11F1A1F1171DCF1D38B0.roa (raw, json)
Hash identifier: 46vjlCBvLSAPxuOcaE7G3sndIY02Iqw1BAGPGFsfjgQ=
Subject key identifier: 6B:6A:3D:3D:50:8D:99:B1:09:F3:E8:4C:18:E7:92:BE:56:6E:F6:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C850F2F2508B11F1A1F1171DCF1D38B0.roa
Signing time: Fri 15 May 2026 18:27:52 +0000
ROA not before: Fri 15 May 2026 18:27:47 +0000
ROA not after: Mon 22 Jun 2026 18:27:47 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117712 (0x1cbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 18:27:47 2026 GMT
Not After : Jun 22 18:27:47 2026 GMT
Subject: CN=6a0765a8-a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:7a:65:64:89:df:47:14:8c:47:a6:fd:7b:
b3:70:24:eb:bd:43:5a:81:3b:22:19:25:de:05:4e:
05:63:28:de:c5:80:0b:7f:64:2b:7f:9a:18:a6:ed:
ba:dd:09:bb:c8:bb:1e:2b:6b:89:71:b1:09:0e:66:
44:17:4d:5d:a5:1a:99:74:2b:bc:6d:bc:00:59:a0:
2b:dc:18:a4:4c:6d:9b:14:d4:ba:b6:0d:c5:db:24:
74:c9:e7:5e:25:0a:ff:d0:70:b3:df:4a:4d:8b:fc:
88:e1:63:f1:b4:62:e2:de:7f:d5:af:1c:9a:1a:89:
ce:d4:96:de:0f:43:df:c6:04:45:d6:a1:ed:75:02:
4e:ea:16:8d:6b:dd:fa:d4:a5:cd:38:87:2e:43:46:
28:47:56:5f:90:34:fc:a9:0e:dc:14:8a:4d:fb:72:
26:5d:6e:60:aa:d5:8b:0c:1a:ef:88:6c:ca:fb:25:
52:cf:ff:ef:85:d4:d5:90:9a:03:db:2d:47:0c:b7:
76:da:99:6b:b9:67:ad:64:65:9b:be:79:4e:1f:36:
c0:93:12:63:dc:e0:80:8c:f7:b0:b7:44:7a:89:a1:
a7:89:3b:a7:42:96:80:37:d2:89:49:c1:54:c0:5d:
f2:10:31:dd:eb:2f:67:d8:69:00:47:c9:92:75:c2:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:3D:3D:50:8D:99:B1:09:F3:E8:4C:18:E7:92:BE:56:6E:F6:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C850F2F2508B11F1A1F1171DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:ed:b2:31:52:56:7e:a7:6d:ef:49:0d:15:57:6b:9a:c4:de:
e5:90:7a:cf:3e:e3:94:b9:01:c2:75:95:eb:17:01:e0:16:95:
20:1e:5b:43:b0:12:a6:2b:50:9d:6b:0f:2f:66:c4:2e:72:50:
68:48:f7:d3:bf:37:80:5f:06:c1:0d:8d:3e:b5:c1:ef:e4:d2:
66:30:44:25:49:6f:27:9b:59:43:f2:f0:91:c7:a8:ca:ca:d3:
be:3d:8f:7d:4c:9b:bf:40:04:8f:34:56:b4:f5:8a:32:44:3c:
fa:48:1d:c0:86:11:ba:aa:97:a6:55:b2:eb:5e:00:96:95:18:
13:9f:52:c1:b3:00:47:79:c8:1b:61:33:8d:95:4e:40:bd:89:
94:27:ed:64:6b:b9:f5:72:9e:c8:6d:5c:55:81:f3:74:65:a2:
78:47:4f:e6:ce:23:0c:8c:49:81:58:f7:11:f3:e8:f7:6f:12:
b6:43:a0:d1:52:75:5e:71:68:ee:2c:11:e8:46:56:00:16:6b:
3e:c5:45:23:80:e8:c1:1c:44:3c:96:95:db:57:35:0f:76:2f:
01:23:45:05:64:e7:b9:6c:c7:8f:5c:9d:cc:22:d0:3e:2b:bc:
e2:c7:4f:53:b1:08:45:a0:37:8d:f2:e6:12:f3:87:8d:70:c2:
7e:3f:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:14 2026 by rpki-client